In the Linux kernel, the following vulnerability has been resolved:
drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
While receiving an MST up request message from one thread in drm_dp_mst_handle_up_req(), the MST topology could be removed from another thread via drm_dp_mst_topology_mgr_set_mst(false), freeing mst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL. This could lead to a NULL deref/use-after-free of mst_primary in drm_dp_mst_handle_up_req().
Avoid the above by holding a reference for mst_primary in drm_dp_mst_handle_up_req() while it's used.
v2: Fix kfreeing the request if getting an mst_primary reference fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo | Mar 10, 2025 | Jan 11, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Apr 11, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | May 7, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 11, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Jan 11, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-57-lowlatencyUpgrade linux-image-5.15.0-136-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1080-gcp-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1073-ibmUpgrade linux-image-5.15.0-1034-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.1-1019-realtimeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-azureUpgrade linux-image-5.15.0-1077-kvmUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1027-gcp-64kUpgrade linux-image-6.8.0-1025-oemUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1026-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1085-azure-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1075-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1034-nvidia-tegraUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1063-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1075-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1022-nvidia-tegra-igxUpgrade linux-image-6.8.0-1025-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1046-xilinx-zynqmpUpgrade linux-image-6.8.0-1025-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1080-gcpUpgrade linux-image-5.15.0-1076-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-1023-ibmUpgrade linux-image-6.8.0-1027-gcpUpgrade linux-image-5.15.0-1078-oracleUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1022-gkeUpgrade linux-image-5.15.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1026-azureUpgrade linux-image-oracleUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1074-intel-iot-realtimeUpgrade linux-image-6.8.0-1025-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1025-nvidia-64kUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1081-aws-fipsUpgrade linux-image-5.15.0-1081-realtimeUpgrade linux-image-6.8.0-1023-oracleUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.15.0-1081-awsUpgrade linux-image-5.15.0-1022-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-136-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1075-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-1026-azure-fdeUpgrade linux-image-6.8.0-1023-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1078-gkeUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-57-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcp | Mar 28, 2025 | Jan 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub